Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Censorship

Blogger Who Revealed GOP Leader's KKK Ties Had Home Internet Lines Cut 420

blottsie writes Last month, Lamar White, Jr. set off a firestorm in Washington when a post on his personal blog revealed that House Majority Whip Steve Scalise, the third most powerful Republican in the House of Representatives, was a featured speaker at a white nationalist conference put on by former Klu Klux Klan Grand Wizard David Duke. Then someone climbed in his back yard and severed his Internet cables.

Comment Re:Impressive (Score 1) 79

How many unauthenticated remote exploits in a HTTP stack does it take to lose a customer?

Not many, I should imagine, but your comment is irrelevant because there were no such bugs fixed in this Java update. The way Oracle describes these bugs is horribly confusing. Normally we expect "remotely exploitable without authentication" to mean you can send a packet across the network and pwn the box. If you actually check the CVEs you will see that there's only one bug like that, and it's an SSL downgrade attack - doesn't give you access to the box. All the others are sandbox escapes. If you aren't trying to sandbox malicious code then they don't affect you.

Comment Re:But Java... (Score 1) 79

Java doesn't have security holes like C or C++ .... or so I was told.

Then again, I haven't seen too many security patches for gcc or libstdc++ or glibc

You're comparing apples and oranges. The "remotely exploitable bugs" in this Java update, like all the others, are assuming you download and run malicious code in the sandbox. GCC and glibc don't have protecting you from malicious code as a goal, in fact Linux typically requires all software to be installed as root no matter what. Obviously if you never even try, you cannot fail.

The interesting story here is not so much that sandboxes have holes (look at the Chrome release notes to see how many security holes are fixed in every update), but rather than the sandbox makers seem to be currently outrunning the sandbox breakers. In 2014 Java had security holes, but no zero days at all - all the exploits were found by whitehat auditors. Same thing for Chrome, people found bugs but they were found by the good guys.

I'm not sure if this means the industry is finally turning a corner on sandboxing of mobile code or not, but it's an interesting trend.

Comment Re:They already have (Score 3, Interesting) 667

Well, we have perfectly good reasons to stop releasing sequestered carbon (by burning oil for fuel) even if we are to ignore the atmospheric output of the process. We have to work progressively harder to get a given energy input. Technological advances that allow us to extract additional sequestered carbon, like fracking, are not infinite in nature. Eventually we must reach an energy balance between the energy required for extraction and the source of energy extracted. So changes in the direction of reducing release of sequestered carbon and finding other energy inputs to society, or reducing the need for those inputs, are called for regardless of whether it is going to get too warm.

Comment Re:They already have (Score 1) 667

Had we depended solely on experiment for everything, we would know much less about the world today. When direct experiment is not possible we still have observation and modeling, and certainly that is science. And of course most of our models do scale, simply because of long observation at all scales. Were this not the case, we would still be arguing about the heliocentric theory, because we can not move planets and suns in order to prove it from first principles, and the orbits of planets would not necessarily scale to suns, etc.

Sure, the earth has large processes that regulate each other, but there is nothing purposeful in their existence and positive feedback is as likely as negative. The Earth is as likely to be naturally fragile as naturally robust. So you can not place faith in unseen processes that will tend to mediate insults to the environment.

If there is some unknown non-anthropocentric cause for climate change, we are still in the position of having to resolve the issue through some modification in society's behavior, rather than consign the victims.

Comment Re:They already have (Score 1) 667

Our control Earth is history. We can see that this Earth killed most macroscopic surface life a few times in history, and we have evidence for why that happened. We can see that it once would not have supported our sort of life. We can see how its atmosphere developed and how ecological networks have formed. We also have a pretty good understanding of gases and their behavior, and we can measure the gases in the atmosphere and the gases emitted from our civilization.

We can readily disprove theories of lucky socks and umbrellas causing rain. We can't, however, explain how any atmosphere would be able to tolerate inputs of the sort our civilization produces without some change.

Comment Re:They already have (Score 4, Insightful) 667

Oh, right. A vast international liberal cabal is adjusting historical temperatures. I guess they've replaced all of the almanacs in libraries with cleverly rewritten versions. And so on. In every country, regardless of the languages they speak and write.

And the last several years have just happened to be increasingly hot.

Take a look at any of the photos of the Earth from space. The planet is big. But the atmosphere is really thin! You can easily tell the difference in pressure if you only go up 8000 feet or so. It is that piece that we're unbalancing.

Slashdot Top Deals

This file will self-destruct in five minutes.

Working...